Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
23s -
max time network
61s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 02:45
General
-
Target
11c8be5f71d42917925dae20dc8e36c71edf7485affde6f575357d67aced1d81.exe
-
Size
13.5MB
-
MD5
c40fd2ce72d1a94718d2b3f6932ec50b
-
SHA1
59035c05fb9708822a548ff8763c7961d77e9ff2
-
SHA256
11c8be5f71d42917925dae20dc8e36c71edf7485affde6f575357d67aced1d81
-
SHA512
4eb06093a5bba912e3c68286240c5303e1000fdc00c3e5e736ff851ab4cac6ac77526183c5bac9ac5cf6581a33c728a37eb774334c0b2d560bda01afc20ebfed
-
SSDEEP
393216:w5CEeoyWluJTR+BvU6p9UeIrx/wdG3TNjAauFc:8CNbsUdrx46pUK
Score
7/10
Malware Config
Signatures
-
UPX packed file 18 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
VMProtect packed file 3 IoCs
Detects executables packed with VMProtect commercial packer.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\11c8be5f71d42917925dae20dc8e36c71edf7485affde6f575357d67aced1d81.exe"C:\Users\Admin\AppData\Local\Temp\11c8be5f71d42917925dae20dc8e36c71edf7485affde6f575357d67aced1d81.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
27.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
27.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
27.3MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB